If you try to pass a control to a runtime command, like DoCmd, then the command will try to interpret the values it is receiving from the control. I think in this case the command intepreted the data as an array or comma delimited data, and was going you a favor.
If you pass a string, then the command will have nothing to interact with, and just accepts the value.
Anyway, for data security, you should ALWAYS put control values in variables and pass the variables since you can do data validation that way if you need to.
Glad it worked.
mmcdonal
Look it up at:
http://wrox.books24x7.com